Debian specing the Debian Apache user and the Apache foundation team.
The suexec should work. Unfortuneately when compiled defaultly, it is self breaking in a "proper" environment, where Apache is integrated into the standard filesystems heirarchy, and the distribution has legacy setup that needs to be maintained so as not to break existing installations.
But, hey what ya gonna do?
I am going to be done the nasty job soon. Prolly some early morning when I can't sleep.
And, yes, I think I'll be doing the website shuffle, moving everything into each users homedir finally soon after I get the uid/gid thing squared.